Jeremy Kemper
40f9fd39f6
Include asset host in public path cache key. Clear cache between asset tag tests.
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7617 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-24 19:47:45 +00:00
Jeremy Kemper
4b33306c70
The tag helper may bypass escaping.
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7608 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-24 08:13:55 +00:00
Jeremy Kemper
cb5b8a7f05
Optimized named routes respect AbstractRequest.relative_url_root. Closes #9612 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7605 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 22:52:57 +00:00
Jeremy Kemper
6580b3ab00
Remove , and ; (comma and semicolon) from routing separators again. References #8558 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7599 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 21:58:02 +00:00
David Heinemeier Hansson
7d9fe04b1d
Fixed cache_page to use the request url instead of the routing options when picking a save path ( closes #8614 ) [josh]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7598 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 21:56:52 +00:00
Jeremy Kemper
a6f49d9b78
Introduce ActionController::Base.rescue_from to declare exception-handling methods. Cleaner style than the case-heavy rescue_action_in_public. Closes #9449 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7597 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 21:56:22 +00:00
Rick Olson
c619003854
Rename some RequestForgeryProtection methods. The class method is now #protect_from_forgery, and the default parameter is now 'authenticity_token'. [Rick]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7596 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 18:14:44 +00:00
Rick Olson
4e3ed5bc44
Merge csrf_killer plugin into rails. Adds RequestForgeryProtection model that verifies session-specific _tokens for non-GET requests. [Rick]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7592 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 02:32:55 +00:00
Rick Olson
2d02199e15
Secure #sanitize, #strip_tags, and #strip_links helpers against xss attacks. Closes #8877 . [Rick, lifofifo, Jacques Distler]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7589 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-23 00:11:08 +00:00
David Heinemeier Hansson
f3bf372630
Test fix ( closes #6911 )
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7587 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 23:26:22 +00:00
David Heinemeier Hansson
f0dc2774e8
Improve tests ( closes #7240 ) [josh]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7581 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 23:11:45 +00:00
David Heinemeier Hansson
ee45d76df8
Roll back #7578 , tests failed
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7580 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 23:10:41 +00:00
David Heinemeier Hansson
9ab8d4d9ed
Improve the error message for assert_redirected_to ( closes #7337 ) [sandofsky]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7578 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 22:22:20 +00:00
Michael Koziarski
7573791284
Disable the routing optimisation code when dealing with foo_url helpers. Add test to actionmailer to expose the problem they introduced. References #9450 [Koz]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7572 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 19:20:06 +00:00
David Heinemeier Hansson
da5d8fa6ad
Fixed JavaScriptHelper#escape_javascript to also escape closing tags ( closes #8023 ) [rubyruy]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7567 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 18:31:44 +00:00
David Heinemeier Hansson
9686dcdb5b
Fixed TextHelper#word_wrap for multiline strings with extra carrier returns ( closes #8663 ) [seth]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7562 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 18:21:54 +00:00
David Heinemeier Hansson
2f8146bc5e
Use rel="stylesheet" in lowercase as prescribed by XHTML standards ( closes #8910 ) [RSL]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7558 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 18:01:54 +00:00
David Heinemeier Hansson
39de84d967
Fixed that setting the :host option in url_for would automatically turn off :only_path (since :host would otherwise not be shown) ( closes #9586 ) [Bounga]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7542 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 17:19:26 +00:00
David Heinemeier Hansson
a7764d8fd4
Added FormHelper#label ( closes #8641 ) [jcoglan]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7541 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 17:17:22 +00:00
Jeremy Kemper
28f7de07cb
Test CGI::Cookie#to_s. Closes #9624 [tarmo]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7535 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-22 09:01:33 +00:00
David Heinemeier Hansson
2ec817c003
Fix tests for atom feed
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7533 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 23:42:59 +00:00
David Heinemeier Hansson
8b2439e5e4
Added AtomFeedHelper (slightly improved from the atom_feed_helper plugin) [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7529 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 22:17:35 +00:00
Michael Koziarski
9b468f4cd7
[html-scanner] Fix parsing of empty tags. Closes #7641 . [anthony.bailey]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7528 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 20:45:49 +00:00
David Heinemeier Hansson
eede82ccb9
Added support for HTTP Only cookies (works in IE6+ and FF 2.0.5+) as an improvement for XSS attacks ( closes #8895 ) [lifo/Spakman]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7525 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 15:05:49 +00:00
David Heinemeier Hansson
26238ac173
Submit missing fixture files
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7524 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 14:36:33 +00:00
David Heinemeier Hansson
4156497602
Fixed CaptureHelper#content_for to work with the optional content parameter instead of just the block #9434 [sandofsky/wildchild]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7522 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-21 03:40:25 +00:00
Jeremy Kemper
09e76e6aca
Autolink behaves well with emails embedded in URLs. Closes #7313 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7516 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-20 20:40:22 +00:00
Jeremy Kemper
835cb43745
Revert [7397]. Reopens #7313 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7515 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-20 08:27:45 +00:00
David Heinemeier Hansson
0d99423727
Fixed that default layouts did not take the format into account #9564 [lifofifo]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7514 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-18 23:10:34 +00:00
Jeremy Kemper
8fd263cd4e
tag_options creates fewer objects
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7512 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-18 10:55:15 +00:00
Michael Koziarski
7cb26b5d2d
Disable optimisation code for UrlWriter as request.host doesn't make sense there.
...
Don't try to use the .to_query method when the route has no dynamic segments.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7501 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-17 09:30:18 +00:00
Jeremy Kemper
148202d401
Fixed optimized route segment escaping. Closes #9562 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7487 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-15 22:10:20 +00:00
David Heinemeier Hansson
0b0931e150
Added block-acceptance to JavaScriptHelper#javascript_tag ( closes #7527 ) [BobSilva/tarmo/rmm5t]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7485 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-15 21:34:25 +00:00
Jeremy Kemper
494d2c631b
root_path returns '/' not ''. Closes #9563 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7482 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-15 20:38:39 +00:00
David Heinemeier Hansson
d48039cefb
Fixed that setting request.format would also affect respond_to blocks [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7479 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-15 04:18:32 +00:00
Jeremy Kemper
c87206cc57
Add option to force binary mode on tempfile used for fixture_file_upload. Closes #6380 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7478 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-14 07:34:45 +00:00
Michael Koziarski
8a7d73cf4d
Tidy up link to remote options. Closes #9505 . [nik.wakelin]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7468 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-12 02:13:59 +00:00
Jeremy Kemper
9807b55c6b
Purge empty files
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7465 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-11 19:54:06 +00:00
David Heinemeier Hansson
bc290c083c
Moved ActionController::Macros::AutoComplete into the auto_complete plugin on the official Rails svn #9512 [lifofifo]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7450 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-11 02:57:19 +00:00
David Heinemeier Hansson
b611c685d9
Fixed that resource namespaces wouldnt stick to all nested resources ( closes #9399 ) [pixeltrix]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7447 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-10 14:31:44 +00:00
David Heinemeier Hansson
2807ccc69a
Moved ActionController::Macros::InPlaceEditing into the in_place_editor plugin on the official Rails svn ( closes #9513 ) [lifofifo]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7442 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-10 00:53:13 +00:00
David Heinemeier Hansson
46f217b298
Removed deprecated form of calling xml_http_request/xhr without the first argument being the http verb [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7436 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 23:00:17 +00:00
David Heinemeier Hansson
f7b0bc9ea3
Removed deprecated ActionController::Base.cookie (use ActionController#Base.cookies[]= instead)
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7435 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 22:56:15 +00:00
David Heinemeier Hansson
4cfc60a6c8
Removed deprecated ActionController::Base.cookie (use ActionController#Base.cookies[]= instead)
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7434 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 22:55:16 +00:00
David Heinemeier Hansson
c6c3fc42d8
Removed the deprecated behavior of appending ".png" to image_tag/image_path calls without an existing extension [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7432 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 22:41:45 +00:00
David Heinemeier Hansson
6b0a647236
Removed ActionController::Base#keep_flash (use flash.keep instead)
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7428 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 21:54:59 +00:00
David Heinemeier Hansson
89b7630627
Removed the deprecated ActionController#Base.template_root/= methods (use ActionController#Base.view_paths/= instead) [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7426 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 18:00:55 +00:00
David Heinemeier Hansson
73c7083651
Rename fieldset_tag to field_set_tag to follow the conventions from text_area and text_field [DHH]
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7423 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 15:58:12 +00:00
Michael Koziarski
80ff0b9f1c
Optimise named route generation when using positional arguments. Closes #9450 [Koz]
...
This change delivers significant performance benefits for the most
common usage scenarios for modern rails applications by avoiding the
costly trip through url_for. Initial benchmarks indicate this is
between 6 and 20 times as fast.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7421 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-09 00:18:55 +00:00
Jeremy Kemper
f1b12b62f4
Fix layout overriding response status. Closes #9476 .
...
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7418 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
2007-09-08 03:12:03 +00:00